Privacy Policy
Privacy and Security- Privacy Policy Statement
Here at SupaGrow, we are committed to ensuring that your privacy is
respected and that provided information is secure.
This Privacy Policy is issued on behalf of the SupaGrow Ltd so when we
mention "SupaGrow", "we", "us" or "our" in this Privacy Policy, we are
referring to the relevant company in the SupaGrow responsible for
processing your data. We will let you know which entity will be the
controller for your data when you purchase a product or service with us.
This document is designed to provide you with relative information on how
SupaGrow Limited collect and use your personal information that we are
provided with when:
· You use our website, or communicate with us via telephone and email
through your use of SupaGrow.co.uk and any country top level domain name
(the "Site"), or any SupaGrow application that we make available from time
to time ("Application").
· Visiting a SupaGrow Store
· You interact with our content and/or services
· You contact our Customer Care Team.
This policy also applies to information held about suppliers and possible
future suppliers, contacts and all other people we hold information about.
Important Information:
You must be over 16 to register for a personal account, subscribe to
SupaGrow emails and/or place an order with SupaGrow. The Site is not
intended for children and we do not knowingly collect data relating to
children.
SupaGrow is a Comodo Secure Site. To ensure that this is a legitimate
Comodo secure Site, please check the following:
1. That the original URL you are visiting comes from SupaGrow.co.uk
2. The status of the server certificate is valid, by clicking on one of the
Comodo logos displayed on the Site
Who are we?
SupaGrow Limited (trading as SupaGrow) is the controller and responsible
for this Site.
Our Data Protection Officer is Rhiannon Sloan who can be contacted by
emailing: dataprotectionofficer@supagrow.co.uk.
We are a company registered in the United Kingdom under registration number
07336680 and our registered address is Meteor House, Finningley, DN9 3GA.
The Personal Information that we collect from you:
By ‘information,’ we mean personal information about you that we collect,
use, share, store and transfer in physical and electronic form. This
information can be grouped together in the following categories:
· Identity and Contact Information - first name, last name, title, email
address, telephone number, delivery address, billing address or any other
information you provide within your personal preferences.
· Financial Information - bank account and payment card details.
· Transaction Information - details about payments to and from you and
other details of products and services you have purchased from us.
· Technical Information - internet protocol (IP) address, your login data,
browser type and version, time zone setting and location, language, browser
plug-in types and versions, operating system and platform and other
technology on the devices you use to access the Site or any Application.
· Profile Information - first name, last name, title, email address,
telephone number, delivery address, billing address, password, purchase and
order history, contact with the Customer Care Team, and any other
information you provide within your personal preferences through your
profile builder.
· Usage Information - information about how you use the Site or any
Application and our products and services.
· Marketing and Communications information - your preferences in receiving
marketing from us and our third parties and your communication preferences.
· Contact History - keeping a record of what you have said to us, for
example, through a web form, by email, on social media or otherwise.
· Social Information - information collected if you choose to link your
social media accounts with us.
How we collect Personal Data/Information about you:
You may give us your information by filling in forms on the Site or any
Application by corresponding with us by post, phone, email, on social media
or otherwise. This includes information you provide when you:
· Register for an account with us,
· Place an order,
· Sign up to our newsletters,
· Register for any loyalty scheme that we offer from time to time,
· Request marketing to be sent to you,
· Contact our Customer Care Team,
· Enter a competition, promotion or survey; or
· Give us feedback.
As you interact with the Site or any Application, we may automatically
collect Technical Information about your equipment, browsing actions and
patterns. We collect this information by using cookies, server logs and
other similar technologies. We may also receive Technical Information about
you if you visit other websites employing our cookies. Please see our
Cookie Policy for further information.
Third Parties:
We may also receive information about you from various third parties such
as: analytics providers, advertising networks, search information providers
and payment service providers.
Sharing your information with third parties:
Except as expressly set out in this policy we will not sell, distribute or
lease your personal information to third parties unless we have your
permission or are required by law to do so.
However, we share your information with the following categories of
companies as an essential part of being able to provide our products and
services to you, as set out in this Privacy Policy:
· Companies that help us fulfil your orders such as payment service
providers, warehouses, order packers, and delivery companies
· Professional service providers, such as marketing agencies, advertising
partners and website hosts who help us run our business
· Credit reference agencies, law enforcement and fraud prevention agencies,
so that we can help tackle fraud
· Companies approved by you, such as social media Sites (if you choose to
link your accounts to us)
· Competition winners on social media
We may also share your personal information with:
· law enforcement agencies, other governmental agencies or third parties if
we are required by law to do so; and
· other business entities should we plan to merge with or be acquired by
that business entity, or if we undergo a re-organisation with that entity.
We may provide third parties with aggregated but anonymised information and
analytics about our customers and, before we do so, we will make sure that
it does not identify you.
How we use your information:
Identity & Contact Information
· to deliver your purchases to you
· to send you service messages by email, SMS or otherwise, such as order
updates
· to create and manage your SupaGrow account
· to provide customer care and support, and handle returns
· for security and to check your identity
· to provide you with marketing (where we have the right to do so – see
marketing section below)
· to show you SupaGrow adverts as you browse the web
· to direct you to the right part of the website
· to communicate with you
Financial Information
· to take payment, and give refunds
· for fraud prevention and detection
Transaction Information
· to provide products you order to you
· to provide customer care and support, and handle returns
· to find out what you, and other customers, like
Technical & Usage Information
· to improve our Site and any Application and set default options for you
(such as language and currency)
· to keep our Site safe and secure
· to find out what you, and other customers, like
Profile Information
· to find out what you, and other customers, like
· to make suggestions and recommendations to you about goods or services
that may be of interest to you
· to manage your participation in any loyalty scheme
Marketing and Communications Information
· to send you information by email, SMS, post, other otherwise, about our
products and services
Contact History
· to provide customer care and support
· to train our staff
Social Information
· to enable you to log-in to our Site simply and easily without having to
create a separate account
· to enable you to share products and services if you choose to.
Legal Basis for Processing:
Our processing of your personal information is necessary for the following:
· The performance of contracts to which you will be a party to and in order
to take steps at your request prior to you entering into those contracts;
· The purposes of legitimate interests pursued by us; or
· In order to comply with a legal obligation to which we are subject.
In relation to any processing of special categories of personal information
such as information about your health, we will generally rely on obtaining
specific consent from you at the time unless there is otherwise a legal
requirement for us to process such information.
Legitimate Interests:
Where our processing is based on the legitimate interest grounds described
above, those legitimate interests are: (i) collecting personal information
to provide you with a smooth and efficient customer experience; (ii)
running our business; (iii) to provide the products and services you have
requested; (iv) to prevent fraud; and (v) for our own marketing, research
and product development.
Will we transfer your information overseas?
The information that we collect from you may be transferred to, and stored
at, a destination outside the European Economic Area ("EEA"). It may also
be processed by staff operating outside the EEA who work for us or for one
of our suppliers. Such staff may be engaged in, among other things, the
fulfilment of your order, the processing of your payment details and the
provision of support services.
When we, or our permitted third parties, transfer your information outside
the European Economic Area, we or they will impose obligations on the
recipients of that data to protect your information to the standard
required in the EEA or otherwise require the recipient to subscribe to
international frameworks intended to enable secure data sharing. In the
case of transfers by us, we will put in place appropriate safeguards to
ensure that your information remains adequately protected. If you would
like more details about the safeguards that we rely on, please contact the
Customer Care Team at customerservices@supagrow.co.uk.
Your Rights:
At any time, you have the right:
· To request access to or a copy of any information which we hold about
you,
· To rectification of your information, if you consider that it is
inaccurate,
· To ask us to delete your information, if you consider that we do not have
the right to hold it,
· To withdraw consent to our processing of your information (to the extent
such processing is based on previously obtained consent),
· To ask us to stop or start sending you marketing messages as described
below in the marketing section,
· To restrict processing of your information,
· to data portability (moving some of your information elsewhere) in
certain circumstances,
· To object to your information being processed in certain circumstances,
and
· To not to be subject to a decision based on automated processing and to
have safeguards put in place if you are being profiled based on your
information.
Any request for access to or a copy of your information must be in writing
and we will endeavour to respond within a reasonable period and in any
event within one month in compliance with data protection legislation. We
will comply with our legal obligations as regards your rights as a data
subject.
We aim to ensure that the information we hold about you is accurate at all
times. To assist us in ensuring that your information is up to date, do let
us know if any of your personal details change. If you wish to update or
correct your personal account details please email
dataprotectionofficer@supagrow.co.uk
Data Subject Access Requests
We would gladly assist in any data subject access requests free of charge.
Data subject access requests must be made in writing and we advise emailing
dataprotectionofficer@supagrow.co.uk to ensure action is promptly
taken.
Please include the following information:
· Full Name
· Email Address
· Billing Address
· Details of the specific information you require and any relevant dates
We may ask for further information to identify you and ensure the personal
data relates to the individual making the request.
We will respond within one month of receiving the information we require to
carry out your request. Responses can be provided in either English, French
or German.
Data Security:
We are committed to ensuring that your information is secure. In order to
prevent unauthorised access or disclosure, we have put in place suitable
physical, electronic and managerial procedures to safeguard and secure the
information we collect online.
All information you provide to us is stored on our secure servers.
Any payment transactions will be encrypted. We use 256-bit SSL Software to
encrypt your payment card information when you place an order on our secure
server. For your added security all payment transactions are processed
automatically by Sage Pay, and we are not party to your personal credit
card or bank details. Where we have given you (or where you have chosen) a
password which enables you to access certain parts of our Site, you are
responsible for keeping this password confidential. We ask you not to share
your password with anyone.
Marketing:
We may use your information to form a view on what we think you may want or
need, or what may be of interest to you. This is how we decide which
products, services and offers may be relevant for you.
You will receive marketing messages from us if you have requested
information from us or purchased goods or services from us and, in each
case, you have not opted out of receiving that marketing.
We may also market to you if we have received your express consent to do so
including where we have collected your details in connection with a
competition or other promotion and you have agreed to receive marketing
from us.
You can stop receiving marketing messages from us at any time. Once you do
this, we will update your profile to ensure that you don’t receive further
marketing messages. Stopping marketing messages will not stop service
communications (such as order updates).
To do this, please choose from the following:
· Email dataprotectionofficer@supagrow.co.uk.
· Click on the ‘unsubscribe’ link within an email to unsubscribe from that
specific email type.
· Contact our Customer Care Team.
Online Adverts:
We also engage in online advertising, also to keep you aware of what we’re
up to and to help you see and find our products.
Like many companies, we target SupaGrow banners and ads to you when you are
on other websites and apps. We do this using a variety of digital marketing
networks and ad exchanges, and we use a range of advertising technologies
like web beacons, pixels, ad tags, cookies, and mobile identifiers, as well
as specific services offered by some Sites and social networks, such as
Facebook’s Custom Audience service.
The banners and ads you see will be based on information we hold about you,
or your previous use of the Site or any Application (for example, your Site
search history, and the content you read on the Site) or on-Site banners or
ads you have previously clicked on.
How long will we keep your information?
We will keep your information for as long as you have your account, or as
long as is needed to be able to provide the services to you, or (in the
case of any contact you may have with our Customer Care Team) for as long
as is necessary to provide support-related reporting and trend analysis
only.
If reasonably necessary or required to meet legal or regulatory
requirements, resolve disputes, prevent fraud and abuse, or enforce our
Terms and Conditions, we may also keep hold of some of your information as
required, even after you have closed your account or it is no longer needed
to provide the services to you.
Where we are permitted to send you direct marketing communications, we may
retain your contact information necessary for this purpose, (provided that
you have consented to receiving them) for as long as you do not unsubscribe
from receiving the same from us.
Links to other websites:
This Privacy Policy only applies to SupaGrow. Where there are links to
other websites these have their own Terms and Conditions and Privacy
Policies that can be viewed on their respective websites.
Contacting us:
Questions, comments and requests regarding this policy are welcomed and
should be addressed to customerservices@supagrow.co.uk.
You can also send a letter by mail to: SupaGrow, Meteor House, Finningley, DN9 3GA
If you have any concerns about our use of your information, you also have
the right to make a complaint to the data protection regulator in your
country. If you are a UK resident, this is the Information Commissioner's
Office, which regulates and supervises the use of personal data in the UK,
via their helpline on 0303 123 1113.
Changes to this Policy:
Any changes we make to our Privacy Policy in the future will be posted on
this page and, where appropriate, notified to you on the Site, within any
Application or by email. Please check back frequently to see any updates or
changes to our policy. This Privacy Policy was last updated on22/05/2018.